{"id":73431,"date":"2025-11-12T08:45:41","date_gmt":"2025-11-12T05:15:41","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-12833-geodirectory-wp-business-directory-plugin-and-classified-listings-directory\/"},"modified":"2025-11-12T08:45:41","modified_gmt":"2025-11-12T05:15:41","slug":"cve-2025-12833-geodirectory-wp-business-directory-plugin-and-classified-listings-directory","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-12833-geodirectory-wp-business-directory-plugin-and-classified-listings-directory\/","title":{"rendered":"CVE-2025-12833 &#8211; GeoDirectory \u2013 WP Business Directory Plugin and Classified Listings Directory"},"content":{"rendered":"<p>CVE ID : CVE-2025-12833<\/p>\n<p>Published :  Nov. 12, 2025, 5:15 a.m. | 16\u00a0minutes ago<\/p>\n<p>Description : The GeoDirectory \u2013 WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 via the &#8216;post_attachment_upload&#8217; function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access and above, to attach arbitrary image files to arbitrary places.<\/p>\n<p>Severity: 4.3 | MEDIUM<\/p>\n<p>Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-12833 Published : Nov. 12, 2025, 5:15 a.m. | 16\u00a0minutes ago Description : The GeoDirectory \u2013 WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 via the &#8216;post_attachment_upload&#8217; function due to missing validation on a &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-73431","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/73431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=73431"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/73431\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=73431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=73431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=73431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}